$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f70a807e-66ea-3b83-aa10-4d55b77c4e0f.roa File: f70a807e-66ea-3b83-aa10-4d55b77c4e0f.roa (raw, json) Hash identifier: +/3iUwFVbSPEpvHdPUaWt85YXUVECgK7TCNtBuARBe8= Subject key identifier: EC:48:20:44:C9:BA:F4:04:54:D3:36:97:C1:06:08:D1:50:55:E6:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1465858195CE7A81EA12F780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f70a807e-66ea-3b83-aa10-4d55b77c4e0f.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16625 IP address blocks: 104.93.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:85:81:95:ce:7a:81:ea:12:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=1dd1c41e-eb52-4863-9116-3150f41f467b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:1e:55:bf:1d:03:e8:25:50:b0:68:3c:de: b8:86:7f:57:90:2e:53:19:1c:12:0e:14:b5:34:5f: c8:3c:37:46:46:05:ab:44:6e:65:99:cb:20:25:8c: 8f:4c:79:fc:65:95:52:f6:9b:09:bb:5d:70:1d:29: 93:7f:7a:4a:70:cc:1e:e9:58:3d:eb:3a:56:0a:09: 2b:88:7e:32:dc:94:97:e2:2b:05:43:d0:24:92:92: a1:dd:f7:82:6c:27:56:f8:6c:82:93:d4:7f:78:22: 69:6a:88:c1:af:1e:82:33:c0:a0:da:63:95:80:00: 8d:e3:b4:03:5e:09:d7:e6:29:d5:0c:6f:c8:46:f2: bd:ee:94:54:c8:4d:50:17:de:24:0c:56:e4:54:74: 34:a9:e6:ad:7b:6c:c4:c8:91:92:de:17:ba:11:f6: d6:a5:6c:f9:9c:70:17:80:f3:6d:cb:f9:86:9d:f0: 7f:83:a9:a6:ed:5d:21:6b:51:1e:a3:7a:5f:b3:56: ea:91:07:c3:56:f9:89:b0:77:1a:b1:3b:ca:27:90: 3b:a4:a3:b1:43:ae:a3:17:b0:2b:43:b4:eb:92:45: 2b:3c:ca:5c:a5:b1:ef:22:30:0c:6f:2f:22:6c:d0: 10:a3:f8:bc:15:ee:90:c5:bd:37:21:68:dc:02:04: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:48:20:44:C9:BA:F4:04:54:D3:36:97:C1:06:08:D1:50:55:E6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f70a807e-66ea-3b83-aa10-4d55b77c4e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.93.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:74:1d:e0:68:4d:1c:ac:8d:5b:70:66:03:a3:7a:71:e7:c9: 6d:1b:77:42:e0:d3:00:c8:63:74:3b:b9:a8:fe:8e:ea:b0:54: 50:a0:31:cd:c9:82:c4:c0:6d:b8:69:c4:38:2b:00:d7:f6:40: d7:a6:67:70:ad:b2:41:ab:34:c3:39:2c:4f:5c:95:25:b1:f7: 93:c0:e0:7e:83:93:4e:11:44:6c:b1:8d:ca:b3:c1:da:51:73: 43:02:88:f6:ae:0b:61:37:6c:db:46:cd:53:5a:1a:ca:59:30: f9:42:dd:36:4e:3e:b0:54:49:bf:50:1d:9b:86:b7:f1:83:7b: 0b:a4:79:04:63:48:d3:f5:db:52:99:26:c5:26:43:30:1a:0b: 10:93:8c:cf:22:1c:5b:38:67:13:bd:dc:62:80:3c:d5:d9:c2: d3:1b:96:91:a1:17:32:10:5b:8e:28:4b:2d:6f:8d:36:05:71: ae:93:b6:50:0a:ba:a3:de:3c:a1:c9:07:69:5b:79:69:7f:db: 3f:3b:33:d0:d9:d8:ab:d8:77:b7:c9:61:96:d3:33:b7:91:b6: 84:1e:a2:37:f6:0c:51:43:3a:1d:81:e2:dc:03:31:2a:c3:91: 86:a2:bb:df:3d:74:7b:c1:90:bd:a4:0b:a5:61:0e:a7:85:79: c5:1c:1c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYWBlc56geoS94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MWRkMWM0MWUtZWI1Mi00ODYzLTkxMTYtMzE1MGY0MWY0NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFweVb8dA+glULBoPN64hn9XkC5TGRwSDhS1 NF/IPDdGRgWrRG5lmcsgJYyPTHn8ZZVS9psJu11wHSmTf3pKcMwe6Vg96zpWCgkr iH4y3JSX4isFQ9AkkpKh3feCbCdW+GyCk9R/eCJpaojBrx6CM8Cg2mOVgACN47QD XgnX5inVDG/IRvK97pRUyE1QF94kDFbkVHQ0qeate2zEyJGS3he6EfbWpWz5nHAX gPNty/mGnfB/g6mm7V0ha1Eeo3pfs1bqkQfDVvmJsHcasTvKJ5A7pKOxQ66jF7Ar Q7TrkkUrPMpcpbHvIjAMby8ibNAQo/i8Fe6Qxb03IWjcAgTrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxIIETJuvQEVNM2l8EGCNFQVebvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcwYTgwN2UtNjZlYS0z YjgzLWFhMTAtNGQ1NWI3N2M0ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaF3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt0HeBoTRysjVtwZgOjenHnyW0bd0Lg0wDIY3Q7uaj+juqwVFCgMc3J gsTAbbhpxDgrANf2QNemZ3CtskGrNMM5LE9clSWx95PA4H6Dk04RRGyxjcqzwdpR c0MCiPauC2E3bNtGzVNaGspZMPlC3TZOPrBUSb9QHZuGt/GDewukeQRjSNP121KZ JsUmQzAaCxCTjM8iHFs4ZxO93GKAPNXZwtMblpGhFzIQW44oSy1vjTYFca6TtlAK uqPePKHJB2lbeWl/2z87M9DZ2KvYd7fJYZbTM7eRtoQeojf2DFFDOh2B4twDMSrD kYaiu989dHvBkL2kC6VhDqeFecUcHIc= -----END CERTIFICATE-----Generated at Sat Jun 7 13:44:51 2025 by rpki-client